nfctool: Fix snep-decode potential overflow
authorSamuel Ortiz <sameo@linux.intel.com>
Mon, 4 Nov 2013 23:48:24 +0000 (00:48 +0100)
committerSamuel Ortiz <sameo@linux.intel.com>
Wed, 20 Nov 2013 00:06:31 +0000 (01:06 +0100)
Code review done by Sebastian Krahmer <krahmer@suse.de>.

tools/nfctool/snep-decode.c

index 27d3c1e..bee06e5 100644 (file)
@@ -159,6 +159,8 @@ static int snep_decode_info(struct sniffer_packet *packet)
        }
 
        frag = g_malloc(sizeof(struct snep_frag));
+       if (!frag)
+               return -ENOMEM;
 
        frag->count = 1;
 
@@ -167,6 +169,8 @@ static int snep_decode_info(struct sniffer_packet *packet)
        frag->received = packet->snep.real_len;
 
        frag->buffer = g_malloc0(frag->buffer_size);
+       if (!frag->buffer)
+               return -ENOMEM;
 
        memcpy(frag->buffer, packet->snep.data, packet->snep.real_len);